$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: 5UgyJN+LDLkvf8s5tetbZ/mXy2dvtLv7Y2zOgY3a524= Subject key identifier: E3:A0:FE:01:BF:98:7F:69:51:FD:84:8E:73:B5:E0:5A:A6:FE:C1:17 Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 0152 Signing time: Sat 29 Mar 2025 03:35:55 +0000 Manifest this update: Sat 29 Mar 2025 03:35:55 +0000 Manifest next update: Sat 05 Apr 2025 03:35:55 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: OMhoO6SiiTBLG/3JtQSsM84USe+39pcP00lHvjHX0lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4 Validity Not Before: Mar 29 03:35:55 2025 GMT Not After : Apr 5 03:35:55 2025 GMT Subject: CN=67e76a9b-81d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:25:4b:78:1d:ca:98:04:f9:3e:4d:1f:c2: 59:6e:95:5b:ce:81:a1:ae:8c:72:b6:94:87:69:bd: a1:c2:58:54:45:dd:85:7f:2c:ad:a5:a5:ed:00:bf: 65:a7:c4:99:d3:50:6a:e3:f3:a5:e6:00:01:0f:9f: 25:6c:c6:84:e3:fd:d0:9d:ea:7c:45:c3:a2:70:2e: fc:cb:d2:c6:1d:0e:a1:cb:bb:30:e0:d5:b7:23:f4: 4c:95:11:25:5f:66:b8:b9:55:85:7a:bf:35:0a:8c: a2:e7:e2:3a:f2:c9:3f:28:2d:69:ec:b6:54:4b:22: 11:a3:61:db:45:9b:b8:94:ff:e5:9f:95:5a:bb:8d: cc:cb:4c:8c:68:4f:e0:50:b9:8e:55:6b:78:0e:78: 0b:bb:b2:db:2d:0f:6d:19:4e:fd:08:e1:16:43:52: 4f:d2:81:a5:79:f5:f5:39:e9:ed:65:4a:17:d2:f5: 2f:ea:81:ec:8b:78:df:f3:46:7f:69:75:41:ae:48: a3:f4:52:06:3f:a8:5e:f8:b2:b9:af:47:a3:a9:1a: c9:ed:af:a1:fd:e8:b7:76:8d:3c:cc:e7:02:87:03: 89:0c:43:72:86:59:49:f3:72:1d:e2:60:04:a2:eb: c7:32:c3:5e:fc:2c:10:b0:62:a5:f6:df:f3:d4:4c: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A0:FE:01:BF:98:7F:69:51:FD:84:8E:73:B5:E0:5A:A6:FE:C1:17 X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ed:27:6e:15:e9:b8:a9:0e:6a:13:c3:99:12:ef:9a:5a:ec: 1f:59:69:18:15:9c:b2:30:10:4a:c1:24:65:1f:c0:94:9a:16: 3e:d4:4b:97:fa:b2:43:ee:68:72:3d:da:48:32:41:f6:e2:9f: 43:73:03:1e:26:7a:25:18:ef:79:b8:d9:74:36:b4:18:00:24: ca:8d:2b:97:cc:60:f8:4e:49:4f:e3:09:ee:32:b8:79:18:5a: 02:b2:50:7d:c1:ec:e5:9e:11:a0:00:cd:7d:f8:d7:65:20:f3: ae:1c:f8:30:90:6a:b3:cb:3c:7b:02:35:cd:03:9d:7d:d7:c5: 10:47:fc:0a:a9:6a:34:7c:76:69:41:83:33:2f:c3:16:ec:55: 7e:0b:30:69:a6:57:ab:67:e7:79:9e:1c:be:87:9e:0d:03:77: ed:21:fa:a0:c3:72:73:72:f7:66:ac:8f:fb:43:36:f4:7d:bc: db:fc:c6:cf:44:3b:b3:7d:75:de:bc:17:29:72:6f:08:9b:7d: b7:07:c7:f3:3d:df:6b:27:80:68:0a:0f:83:bc:50:9c:84:1c: 70:49:2a:ba:55:1d:5a:ab:19:31:e2:d9:4e:11:d1:a9:fb:60: 1e:23:97:c9:54:25:16:20:8e:4e:d7:ea:6d:7b:7f:b4:fb:92: 0e:d3:11:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUwMzI5MDMzNTU1WhcNMjUwNDA1MDMzNTU1WjAYMRYwFAYD VQQDEw02N2U3NmE5Yi04MWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqN8lS3gdypgE+T5NH8JZbpVbzoGhroxytpSHab2hwlhURd2FfyytpaXtAL9l p8SZ01Bq4/Ol5gABD58lbMaE4/3Qnep8RcOicC78y9LGHQ6hy7sw4NW3I/RMlREl X2a4uVWFer81Coyi5+I68sk/KC1p7LZUSyIRo2HbRZu4lP/ln5Vau43My0yMaE/g ULmOVWt4DngLu7LbLQ9tGU79COEWQ1JP0oGlefX1OentZUoX0vUv6oHsi3jf80Z/ aXVBrkij9FIGP6he+LK5r0ejqRrJ7a+h/ei3do08zOcChwOJDENyhllJ83Id4mAE ouvHMsNe/CwQsGKl9t/z1EyopwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOg/gG/ mH9pUf2EjnO14Fqm/sEXMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg7SduFem4qQ5qE8OZEu+aWuwfWWkYFZyyMBBKwSRlH8CUmhY+1EuX +rJD7mhyPdpIMkH24p9DcwMeJnolGO95uNl0NrQYACTKjSuXzGD4TklP4wnuMrh5 GFoCslB9wezlnhGgAM19+NdlIPOuHPgwkGqzyzx7AjXNA51918UQR/wKqWo0fHZp QYMzL8MW7FV+CzBpplerZ+d5nhy+h54NA3ftIfqgw3JzcvdmrI/7Qzb0fbzb/MbP RDuzfXXevBcpcm8Im323B8fzPd9rJ4BoCg+DvFCchBxwSSq6VR1aqxkx4tlOEdGp +2AeI5fJVCUWII5O1+pte3+0+5IO0xEr -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:52 2025 by rpki-client